SUGGESTIVE SECURITY POLICY FRAMEWORK FOR RESILIENT NETWORK INFRASTRUCTURE

The usage of common terminology and semantics is sometimes overlooked throughout the implementation of information management policies. This adds to a lack of mechanism for publishing protection policy, end user understanding, conversion of high level policy to lowest level component implementation plans, and steps to take in a crisis, resulting in blurred guidelines for control, review, and execution of the security policy for staff, creating inconsistency in adhering to and enforcing it. This necessitates the development of a robust protection strategy that has been empirically validated. The aim of this paper is to bridge the divide between high-level security policy definitions and low-level network infrastructure security execution. With the rise of modern and emerging technology including cloud storage, remote computing, enterprise mobility, and e-commerce, network protection has remained a constant threat. Using the network configuration model and the protection policy associated with the network elements that must be implemented, this paper provides a security mechanism to bridge the difference between high level design specifications and the low level implementation process for network infrastructure security. New architectures and designs of resilient networked networks that can sustain essential services and infrastructures are needed. The claims have been well-rehearsed in the past, but there is still more work to be done, not least to explain the viability of constructing such structures. The need to specify and realise suitable modules that interact with one another to create a resilient device is one of the remaining challenges. This paper summarises the current state of the art, highlights recent contributions, and forecasts potential research and opportunities.